The check runs here, in the browser.

Paste any JSON response that carries a receipt. The active Ed25519 public key loads fromGET /v1/pubkey. You can paste another key, and you can require a nonce. The signature attests origin. It does not recompute the noise, and it is not a VRF.